WSO2 vulnerabilities
131 CVEs and advisories name WSO2 as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-5848Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products Due to Improper Input Validation
- CVE-2024-0392Cross-Site Request Forgery (CSRF) in WSO2 Enterprise Integrator 6.6.0 Management Console Due to Missing CSRF Token Validation
- CVE-2024-2321Incorrect Authorization in Multiple WSO2 Products Allows API Access via Refresh Token
- CVE-2023-6911Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be
- CVE-2023-6839Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in th
- CVE-2023-6838Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint.
- CVE-2023-6837Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation
- CVE-2023-6836Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely us
- CVE-2023-6835Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could
- CVE-2022-4521WSO2 carbon-registry Request Parameter cross site scripting
- CVE-2022-4520WSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross site scripting